Atlassian's Whistic Security Profiles - 2022 Update

[#1]

Atlassian's Trust Team has recently updated ALL our downloadable Product Security Profiles in Whistic. This Profiles update includes the existing Jira Cloud, Confluence Cloud, Bitbucket Cloud, Trello, Opsgenie, Statuspage, and Jira Align Security Profiles.

For all of our security profiles, we have added the following industry-standard completed questionnaires:

• Cloud Security Alliance CAIQ questionnaire

• CAIQ-Lite questionaire

• Standard Information Gathering (SIG) questionnaire

• ISO27001/02 questionnaire

• Vendor Security Alliance (VSA) questionnaire

• Log4J vulnerability response

• Solarwinds vulnerability response

Atlassian's Trust Team will be evaluating additional questionnaires as appropriate. Upon request, you can review any of the pre-compiled questionnaire responses. If you are already a customer of Whistic, you can import any of our Security Profiles from their Trust Catalog.

Please visit our Vendor Security and Risk Response page if you would like to use Whistic to review the Atlassian Security Profile documentation. The page will direct you to a form where you must register in order for us to share our documentation.

Below are direct links by Atlassian Product:

• Bitbucket Security Profile

• Confluence Cloud Security Profile

• Halp Security Profile

• Jira Align Security Profile

• Jira Cloud Security Profile

• Opsgenie Security Profile 

• Statuspage Security Profile

• Trello Security Profile

In true Atlassian spirit, we believe that opening as many channels for our customers to self serve is a more scalable approach to customer service. We will continually evaluate services like this to support our strategy of being as transparent as possible.

Have questions? Contact our Atlassian Support.

---

Why Self-Serve & Whistic?

Many of Atlassian's Support and Field Services reps receive requests from customers to complete industry-standard questionnaires which detail our security, operational, or enterprise programs. To provide this, we use Whistic, a leader in vendor risk management who also works with companies like Okta, Airbnb, and Zynga. By using Whistic, customers evaluating purchasing our Atlassian products can now request access to these Security Profiles and review or download our pre-compiled standard questionnaires, speeding up their own vendor review processes from weeks to days.

In 2021, Atlassian's Whistic Product Security Profiles were shared over 175 times with customers, speeding up their Atlassian review process.